
CVE-2026-125350 is a "use after release" vulnerability, which affects Windows, Mac and Linux users. Officials call for updates as soon as possible
AI-generated summary
Google recently released an emergency security update for Chrome to patch a high-risk zero-day vulnerability that has been exploited by hackers, affecting Windows, Mac and Linux computer users. This is also the eighth zero-day vulnerability exploited by hackers in Chrome this year.
Attention people who are accustomed to using Google Chrome browser! Google recently released an emergency security update to patch a high-risk vulnerability that has been exploited by hackers, affecting Windows, Mac and Linux computer users. This is also the eighth zero-day vulnerability in Chrome this year that has been exploited by hackers. Officials call on users to update as soon as possible to avoid exposing their computers to security risks.
The vulnerability number this time is CVE-2026-125350, which exists in the XML element used by Chrome to process web page data. It is a "Use-After-Free" vulnerability. To put it simply, a memory management error occurs when the browser processes data, which may give hackers the opportunity to sneak in and further execute malicious code.
What's more noteworthy is that this vulnerability is not just a potential risk. Google has confirmed that it found hackers exploiting vulnerabilities in real environments. However, the target of the attack, the number of victims and the specific attack method have not yet been announced, so the actual scope of impact cannot be confirmed.
In response to this security vulnerability, Google has released an update for the Chrome desktop version. The patched versions for Windows and macOS are 157.0.8103.50/.51, and for Linux, 157.0.8103.50. Subsequent updated versions also include relevant patches.
Ordinary users do not need to understand the complex vulnerability principles, as long as they confirm that Chrome has been updated to a safe version. The operation method is also very simple. After opening Chrome, click the "⋮" menu in the upper right corner and enter "Help" → "About Google Chrome". The system will automatically check whether there is a new version. After completing the update, restart the browser.
Google says it may take days to weeks for the update to be fully rolled out to all users. Since this vulnerability has been actually exploited, the public is advised not to delay, especially those who use Chrome every day to surf the Internet, log in to social accounts, or process work materials, and should confirm the browser version as soon as possible.

Microsoft, the global software giant, stated that consumer product services have been fully restored at 4:10 pm UTC on the 13th, and Microsoft 365 enterprise services are gradually recovering. Previously, Microsoft 365, Outlook, Teams and other services crashed on the 12th, affecting users in many places around the world.
Beijing Language and Culture University revealed that the first Pakistani foreign astronaut to visit the Chinese space station had experience in learning Chinese, and two candidates had studied Chinese at the Confucius Institute in Islamabad, Beijing Language and Culture University.

Google recently launched the November Pixel Drop feature update, but it caused many disasters. Many Pixel 10 and Pixel 11 series users have complained about black camera screens, wireless charging failures, Wi-Fi abnormalities and lock screen issues after the update, causing user dissatisfaction.

Former Huida CEO Huang Jen-Hsun was revealed to have had an extramarital affair with Huang Le, a former Singaporean Megaspeed executive suspected of being a Chinese spy. The company has handled more than US$4 billion in Huida chip transactions in two years, but its offices in Singapore and Malaysia are empty. It is suspected of circumventing US export controls to transfer chips to China and has corporate ties with Alibaba.

The reporter from the main station decoded Shenzhen's technological innovation from a maritime perspective, reporting that Qianhai has transformed from a tidal flat into an innovation highland with 12 unicorn companies and more than 2,000 national high-tech enterprises. The Robot Valley has opened up the entire chain of industry, academia and research, and the Hetao Shenzhen-Hong Kong Science and Technology Innovation Cooperation Zone has achieved institutional ice-breaking and twin-city collaboration.